CVEs published in September 2022
3,650 vulnerabilities, 294 critical, 12 exploited.
- nokia 1350 optical management systemIn NOKIA 1350 OMS R14.2, multiple OS Command Injection vulnerabilities occur in /CGI-BIN/OTNE_1...9.8 Critical
- nokia 1350 optical management systemIn NOKIA 1350 OMS R14.2, Insufficiently Protected Credentials (cleartext password) occur in /cgi...6.5 Medium
- nokia 1350 optical management systemIn NOKIA 1350 OMS R14.2, multiple SQL Injection vulnerabilities occur in /cgi-bin/R14.2/easy1350...8.8 High
- nokia 1350 optical management systemIn NOKIA 1350 OMS R14.2, multiple OS Command Injection vulnerabilities occur in /cgi-bin/R14.2...8.8 High
- hospital management system project management systemHospital Management System v1.0 was discovered to contain multiple SQL injection vulnerabilities...9.8 Critical
- nokia 1350 optical management systemIn NOKIA 1350 OMS R14.2, an Insertion of Sensitive Information into an Application Log File...7.5 High
- wavlink wn531g3, wn531g3 firmware +1 moreWAVLINK Quantum D4G (WN531G3) CSRF8.8 High
- wavlink wn531g3, wn531g3 firmware +1 moreWAVLINK Quantum D4G (WN531G3) Session Management by IP Address8.8 High
- wavlink wn531g3, wn531g3 firmware +1 moreWAVLINK Quantum D4G (WN531G3) Pass-The-Hash7.5 High
- lief-project liefLIEF contains a segmentation violation5.5 Medium
- lief-project liefLIEF commit 365a16a was discovered to contain a reachable assertion abort via the component...5.5 Medium
- lief-project liefLIEF vulnerable to heap based buffer overflow via print_binary function7.8 High
- lief-project liefLIEF contains segmentation violation5.5 Medium
- lief-project liefLIEF vulnerable to heap based buffer overflow7.8 High
- unisys data exchange management studioUnisys Data Exchange Management Studio before 6.0.IC2 and 7.x before 7.0.IC1 doesn't have an Anti...8.8 High
- devolutions remote desktop managerImproper Access Control vulnerability in the Duo SMS two-factor of Devolutions Remote Desktop...7.0 High
- sap businessobjects business intelligence, sap se businessobjects business intelligence platform (commentary db) +1 moreUnder certain conditions an attacker authenticated as a CMS administrator access the BOE...5.2 Medium
- red hat ansible automation platform 1.2, redhat ansible automation platform, red hat ansible automation platform 2 +2 moreController: cross site scripting in automation controller ui4.6 Medium
- qemuA DMA reentrancy issue was found in the Tulip device emulation in QEMU. When Tulip reads or...7.8 High
- onedev project onedevCI/CD Docker Escape in OneDev9.9 Critical
- onedev project onedevPersistent XSS in OneDev5.4 Medium
- onedev project onedevGit Repository Disclosure in Onedev7.5 High
- microsoft visual studio codeVisual Studio Code Elevation of Privilege Vulnerability7.3 High
- microsoft av1 video extensionAV1 Video Extension Remote Code Execution Vulnerability7.8 High
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability7.7 High
- microsoft raw image extensionRaw Image Extension Remote Code Execution Vulnerability7.3 High
- microsoft office, visio, 365 apps +6 more +8 moreMicrosoft Office Visio Remote Code Execution Vulnerability7.8 High
- microsoft sharepoint server, sharepoint enterprise server 2013 service pack 1, sharepoint enterprise server 2016 +5 more +7 moreMicrosoft SharePoint Server Remote Code Execution Vulnerability8.8 High
- microsoft sharepoint server, sharepoint enterprise server 2013 service pack 1, sharepoint enterprise server 2016 +6 more +8 moreMicrosoft SharePoint Server Remote Code Execution Vulnerability8.8 High
- microsoft azure arc, azure guest configuration +1 moreAzure Guest Configuration and Azure Arc-enabled servers Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +24 more +26 moreWindows Graphics Component Information Disclosure Vulnerability6.5 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +24 more +26 moreWindows Print Spooler Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +24 more +26 moreWindows Fax Service Remote Code Execution Vulnerability7.8 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +31 more +33 moreWindows Common Log File System Driver Elevation of Privilege Vulnerability7.8 High
- microsoft windows 7, windows 7 service pack 1, windows server 2008 service pack 2 +5 more +7 moreWindows Kernel Elevation of Privilege Vulnerability7.8 High
- microsoft office, 365 apps, 365 apps for enterprise +3 more +5 moreMicrosoft Office Visio Remote Code Execution Vulnerability7.8 High
- microsoft 365 apps, 365 apps for enterprise, office 2013 service pack 1 +7 more +9 moreMicrosoft PowerPoint Remote Code Execution Vulnerability7.8 High
- microsoft sharepoint server, sharepoint enterprise server 2013 service pack 1, sharepoint enterprise server 2016 +5 more +7 moreMicrosoft SharePoint Server Remote Code Execution Vulnerability8.8 High
- microsoft windows server 2012 r2, windows server 2012 r2 (server core installation), windows server 2016 +5 more +7 moreNetwork Device Enrollment Service (NDES) Security Feature Bypass Vulnerability6.5 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +21 more +23 moreSPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability8.1 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 20h2 +10 more +12 moreWindows Kernel Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +24 more +26 moreWindows Group Policy Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1809, windows 10 version 20h2, windows 10 version 21h1 +7 more +9 moreDirectX Graphics Kernel Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +11 more +13 moreWindows Enterprise App Management Service Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +24 more +26 moreMicrosoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability8.8 High
- microsoft windows 11 version 21h2, windows server 2022, windows 11 +2 moreHTTP V3 Denial of Service Vulnerability7.5 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +25 more +27 moreMicrosoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +25 more +27 moreMicrosoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +24 more +26 moreMicrosoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +21 more +23 moreWindows Secure Channel Denial of Service Vulnerability7.5 High
- Show moreLoading…